Summary
Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
Exploitation of this vulnerability requires that a local user executes the Visual Studio installer
According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?
Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.
According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?
An attacker who successfully exploited this vulnerability could affect the integrity by is replacing one file with another.
Security updates
17.2.13 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
17.0.19 — https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0
16.11.24 — https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
15.9.52 — https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
17.4.5 — https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
Vulnerabilities 1
-
Medium 5.6
Visual Studio Denial of Service Vulnerability
Visual Studio Denial of Service Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2023-21567 Visual Studio Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21567
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss